This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
File:                     41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (raw, json)
Hash identifier:          r+LFkrlJTgbZU79TY9/LdqDV0Dn4YAtBa1DktA8v3qs=
Subject key identifier:   89:39:CC:F4:40:C3:AB:E7:11:7B:05:80:7D:B6:4B:AD:11:9E:85:8A
Certificate issuer:       /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Certificate serial:       0D16
Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
Signing time:             Tue 23 Dec 2025 16:12:01 +0000
ROA not before:           Tue 23 Dec 2025 16:12:01 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134146
IP address blocks:        103.55.144.0/22 maxlen: 24
                          103.106.56.0/24 maxlen: 24
                          103.206.231.0/24 maxlen: 24
                          202.83.124.0/24 maxlen: 24
                          202.83.126.0/23 maxlen: 23
                          202.83.126.0/24 maxlen: 24
                          202.83.127.0/24 maxlen: 24
                          2400:4fc0::/32 maxlen: 32
                          2400:4fc0:1::/48 maxlen: 48
                          2400:4fc0:2::/48 maxlen: 48
                          2400:4fc0:3::/48 maxlen: 48
                          2400:4fc0:4::/48 maxlen: 48
                          2400:4fc0:5::/48 maxlen: 48
                          2400:4fc0:6::/48 maxlen: 48
                          2400:4fc0:7::/48 maxlen: 48
                          2400:4fc0:8::/48 maxlen: 48
                          2400:4fc0:9::/48 maxlen: 48
                          2400:4fc0:a::/48 maxlen: 48
                          2400:4fc0:b::/48 maxlen: 48
                          2400:4fc0:c::/48 maxlen: 48
                          2400:4fc0:d::/48 maxlen: 48
                          2400:4fc0:e::/48 maxlen: 48
                          2400:4fc0:f::/48 maxlen: 48
                          2400:4fc0:10::/48 maxlen: 48
                          2400:4fc0:11::/48 maxlen: 48
                          2400:4fc0:12::/48 maxlen: 48
                          2400:4fc0:13::/48 maxlen: 48
                          2400:4fc0:14::/48 maxlen: 48
                          2400:4fc0:15::/48 maxlen: 48
                          2400:4fc0:16::/48 maxlen: 48
                          2400:4fc0:17::/48 maxlen: 48
                          2400:4fc0:18::/48 maxlen: 48
                          2400:4fc0:19::/48 maxlen: 48
                          2400:4fc0:1a::/48 maxlen: 48
                          2400:4fc0:1b::/48 maxlen: 48
                          2400:4fc0:1c::/48 maxlen: 48
                          2400:4fc0:1d::/48 maxlen: 48
                          2400:4fc0:1e::/48 maxlen: 48
                          2400:4fc0:1f::/48 maxlen: 48
                          2400:4fc0:20::/48 maxlen: 48
                          2400:4fc0:21::/48 maxlen: 48
                          2400:4fc0:22::/48 maxlen: 48
                          2400:4fc0:23::/48 maxlen: 48
                          2400:4fc0:24::/48 maxlen: 48
                          2400:4fc0:25::/48 maxlen: 48
                          2400:4fc0:26::/48 maxlen: 48
                          2400:4fc0:27::/48 maxlen: 48
                          2400:4fc0:28::/48 maxlen: 48
                          2400:4fc0:29::/48 maxlen: 48
                          2400:4fc0:2a::/48 maxlen: 48
                          2400:4fc0:2b::/48 maxlen: 48
                          2400:4fc0:2c::/48 maxlen: 48
                          2400:4fc0:2d::/48 maxlen: 48
                          2400:4fc0:2e::/48 maxlen: 48
                          2400:4fc0:2f::/48 maxlen: 48
                          2400:4fc0:30::/48 maxlen: 48
                          2400:4fc0:31::/48 maxlen: 48
                          2400:4fc0:32::/48 maxlen: 48
                          2400:4fc0:33::/48 maxlen: 48
                          2400:4fc0:34::/48 maxlen: 48
                          2400:4fc0:35::/48 maxlen: 48
                          2400:4fc0:36::/48 maxlen: 48
                          2400:4fc0:37::/48 maxlen: 48
                          2400:4fc0:38::/48 maxlen: 48
                          2400:4fc0:39::/48 maxlen: 48
                          2400:4fc0:3a::/48 maxlen: 48
                          2400:4fc0:3b::/48 maxlen: 48
                          2400:4fc0:3c::/48 maxlen: 48
                          2400:4fc0:3d::/48 maxlen: 48
                          2400:4fc0:3e::/48 maxlen: 48
                          2400:4fc0:3f::/48 maxlen: 48
                          2400:4fc0:40::/48 maxlen: 48
                          2400:4fc0:41::/48 maxlen: 48
                          2400:4fc0:42::/48 maxlen: 48
                          2400:4fc0:43::/48 maxlen: 48
                          2400:4fc0:44::/48 maxlen: 48
                          2400:4fc0:45::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
                          rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 17:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3350 (0xd16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
        Validity
            Not Before: Dec 23 16:12:01 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=694abf51-0727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:29:e4:51:12:1a:35:b3:d3:2d:d4:a4:31:
                    9e:4c:04:83:6d:16:25:ab:36:bc:65:09:ae:28:cc:
                    6c:6b:0a:28:87:f7:51:ad:a1:4b:d8:f2:8f:11:e8:
                    63:15:e6:80:9b:6b:5f:48:60:f2:47:10:24:20:2a:
                    7a:05:8e:fa:fa:59:d9:56:a0:bd:91:97:68:be:38:
                    6d:ad:8a:90:11:82:af:bc:86:21:49:78:3f:8d:0a:
                    2b:bd:fe:ab:86:c1:26:2e:88:b0:bb:fc:e6:eb:27:
                    8f:d9:39:f6:0a:68:a9:77:04:2a:e7:b8:9b:69:ea:
                    40:ff:fb:5f:ae:9d:b9:60:17:ac:2a:f9:5b:87:ba:
                    5d:45:f0:0a:76:85:ad:05:d8:53:db:be:d0:3b:6d:
                    f6:2f:9a:78:32:63:95:2b:67:9b:02:b4:12:4b:1f:
                    f0:c0:4f:73:8a:05:dc:66:4b:7a:e7:56:01:65:64:
                    ca:b6:5f:18:1c:de:f7:8e:7b:87:e4:6e:04:b8:63:
                    92:53:3e:7c:e9:09:37:cb:07:26:34:8c:42:9e:9c:
                    14:bf:f9:ec:30:10:fd:6b:98:ac:f7:ae:97:22:5d:
                    8b:e1:eb:d8:9d:83:9f:65:84:4c:29:64:bf:41:53:
                    ca:f0:38:3b:33:e3:53:03:51:53:35:37:a6:c1:50:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:39:CC:F4:40:C3:AB:E7:11:7B:05:80:7D:B6:4B:AD:11:9E:85:8A
            X509v3 Authority Key Identifier:
                keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.144.0/22
                  103.106.56.0/24
                  103.206.231.0/24
                  202.83.124.0/24
                  202.83.126.0/23
                IPv6:
                  2400:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:53:78:2e:4a:d3:ae:6c:a9:db:51:f7:f7:53:ab:5d:ee:e6:
         ee:82:e2:6f:f6:82:30:c7:3a:4c:57:a3:14:8d:54:d8:d5:8e:
         fc:60:3b:6d:d3:be:a7:27:ea:f3:57:fe:18:ce:a0:ed:dc:90:
         5a:f7:95:3c:2a:83:27:3c:4f:bf:0d:c5:7a:c2:66:0c:2f:98:
         f2:f6:ff:a9:64:68:d0:99:ad:1a:56:d6:2a:2f:db:8c:e9:be:
         08:6e:89:4d:a2:3b:e2:7c:34:98:34:73:c8:7b:7f:99:c9:54:
         5f:76:6e:f1:50:0a:3c:d4:52:79:a5:7c:13:1b:a5:da:91:70:
         49:89:a3:a8:26:35:e3:97:7e:34:c0:db:6a:2b:67:c9:ae:71:
         87:ce:52:0a:d0:78:26:1e:32:c9:ec:93:33:4a:86:01:0c:45:
         3b:fd:e5:cc:1c:de:f6:15:fb:4f:b0:90:ca:cc:c1:a7:2f:39:
         e1:57:c2:ae:07:be:af:8a:3f:9e:18:7b:71:86:71:59:74:45:
         1f:c1:ad:70:7b:79:ef:f5:be:14:03:c5:2a:7e:42:6a:e9:aa:
         fc:3f:50:79:f7:28:21:c0:7a:c6:19:ff:c0:2b:2d:80:5d:e8:
         f1:32:9a:8c:95:67:84:a6:5f:bc:09:62:c7:d4:92:f6:d6:d6:
         fc:ed:53:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:19:03 2026 by rpki-client